CVE-2025-12841

creationtimestamp| type| source ---|---|--- 2025-12-12 11:13:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7rxhk2xat2m 2025-12-12 11:15:55+00:00| seen| https://gist.github.com/Darkcrai86/ec7dbbcd699e57c904499a621ce6f55d 2025-12-12 11:39:49+00:00| seen|...

CVE-2025-12841 Bookit < 2.5.1 – Unauthenticated Settings Update

The Bookit WordPress plugin before 2.5.1 has a publicly accessible REST endpoint that allows unauthenticated update of the plugins Stripe payment options...